ecommerce-amazon-competitor-lookup
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate tool for Amazon competitor analysis, integrating with the SellerSprite API through a vendor-provided proxy.
- [COMMAND_EXECUTION]: The Python script
scripts/amazon_competitor_lookup.pymanages API interactions, local caching, and data persistence. It performs expected file system operations like directory creation and writing JSON files within the project or home directory. - [EXTERNAL_DOWNLOADS]: The tool communicates with a remote API endpoint defined by the
NEXSCOPE_PROXY_BASEenvironment variable. This network activity is necessary for the tool's core functionality and follows the vendor's standard architecture. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Amazon listings. While this introduces a theoretical injection surface, the risk is mitigated as the script primarily logs raw data to disk and provides structured summaries, adhering to safe data handling practices.
Audit Metadata